ZDI-26-097 HIGH 7.5 Published Feb 13, 2026

Oracle VirtualBox VMSVGA Heap-based Buffer Overflow Local Privilege Escalation Vulnerability

Oracle

A privilege escalation vulnerability has been discovered in Oracle VirtualBox (CVE-2026-21983) that allows local attackers with high-privileged code execution on a guest system to escalate their access further, rated HIGH severity with a CVSS score of 7.5. An attacker exploiting this flaw could gain complete control of the affected VirtualBox environment. Security teams should prioritize patching VirtualBox installations and limit code execution privileges on guest systems to reduce exploitation risk.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy